Data processing addendum

Parties and roles

You (the workspace customer) are the controller. HelpWich is the processor. End customers who email your inboxes are data subjects of the controller.

Subject matter and duration

HelpWich processes support email, customer profiles, attachments, teammate accounts, and related workspace records so you can run a shared inbox, docs, and reports.

Processing lasts for the life of the workspace, then until deletion finishes. Operational logs follow the retention windows in the Privacy policy.

Nature and purpose

We store, display, search, and transmit this data so your team can reply, assign, report, and (if you enable it) send CSAT links. We act only on your documented instructions: using the product, the API, and written requests to hello@helpwich.com.

Types of personal data

Typical records include names, email addresses, message content, attachments, IP or device hints on teammate sessions, and any extra fields you store on a customer profile.

Your instructions

You instruct us to process data as the product is designed. You must not upload data you are not allowed to process. You decide how long to keep conversations and when to erase a customer or workspace.

HelpWich obligations

We will:

• Process personal data only on your instructions, including this DPA, unless the law requires otherwise.
• Require people who handle that data to keep it confidential.
• Use appropriate technical and organizational measures (encryption in transit, encrypted mail credentials, access control, audit logs).
• Help you respond to data-subject requests using the product tools (customer erase, conversation and inbox delete, workspace delete) and, where those are not enough, via email.
• Notify you without undue delay if we become aware of a personal-data breach that affects your workspace.
• Delete workspace personal data when you delete the workspace, and return a copy first if you ask in writing before deletion and we can reasonably export it.

Sub-processors

We use Stripe to process payments. Mail you connect (IMAP, SMTP, or forwarding) is sent through servers you choose; those providers are yours, not our sub-processors.

We will post material changes to this list on this page. If you object to a new sub-processor that processes your personal data, you may delete the workspace.

International transfers

HelpWich is operated from the infrastructure we use to host the app. If that involves a transfer out of the EEA, UK, or Switzerland, we will use a lawful mechanism (such as Standard Contractual Clauses) where required.

Audits

You may ask for a written summary of our security measures once per year, or after a breach that affects your workspace. On-site audits are limited to what is reasonable and do not include other customers’ data.

Liability and order of terms

This DPA is part of your HelpWich subscription. If it conflicts with other product copy on data-protection duties, this DPA controls. Each party’s liability follows the subscription you purchased, except where data-protection law says a limit cannot apply.

Contact

Privacy and DPA requests: hello@helpwich.com. Last updated 17 August 2026.